Italy prepares for GDPR enforcement as May 25 deadline approaches

Italy is set to enforce the EU General Data Protection Regulation (GDPR) on 25 May 2018, replacing the existing national data‑protection code. The government has approved a delegated decree to harmonise Italian law with the EU framework, imposing new obligations, duties and potential sanctions on all organisations that collect or process personal data.

Legal professionals are urged to adopt compliance measures, with guidance from the Italian Bar Association outlining key steps for law firms. At the same time, the merchants’ association Confesercenti Bologna has published a GDPR‑compliant privacy notice, explaining how personal data are handled, detailing data‑subject rights and providing contact information for its Data Protection Officer.